Page MenuHomePhabricator

[lib] Add identityInvalidSessionDowngrade
ClosedPublic

Authored by inka on Feb 6 2024, 2:41 AM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Jul 6, 2:11 AM
Unknown Object (File)
Tue, Jul 2, 7:17 PM
Unknown Object (File)
Sat, Jun 29, 10:50 PM
Unknown Object (File)
Tue, Jun 25, 8:16 AM
Unknown Object (File)
Fri, Jun 21, 12:44 AM
Unknown Object (File)
Fri, Jun 21, 12:43 AM
Unknown Object (File)
Sat, Jun 15, 2:43 AM
Unknown Object (File)
Fri, Jun 14, 8:48 AM
Subscribers

Details

Summary

Adding a function that checkes if session downgrade is valid or not. Similarily to invalidSessionDowngrade, we check if

  1. Some user is currently logged in
  2. The action is trying to downgrade the session (currentUserInfo is being set to null or {anonymous: true})
  3. The user is the same user the action was dispatched for
  4. The session is the same session the action was dispatched for (checking if CSAT changed)

See this discussion for examples of scenarios in which a session downgrade is invalid

Test Plan

Tested that if different user infos are provided in actionCurrentUserInfo and preRequestUserState.currentUserInfo then the function returns true.
Tested that if a different CSAT is present in currentReduxState and preRequestUserState, the function returns true.

Diff Detail

Repository
rCOMM Comm
Lint
Lint Not Applicable
Unit
Tests Not Applicable